Configuring a CLM Action Failure Alert

A Certificate Lifecycle Management (CLM) action failure alert in certificate management is a notification generated when a CLM action fails. CLM involves managing digital certificates throughout their lifecycle, such as Enroll, Regenerate, Renewal, Revoke, Suspend, Reissue, and Reinstate.

When a CLM action fails, it means that a specific task related to certificate management did not complete successfully. These alerts inform administrators to investigate and resolve the problem, ensuring the security and functionality of systems relying on digital certificates. This failure might happen due to various reasons, such as:
  • Network Issues: Connectivity problems between the certificate authority (CA) and the requesting system.
  • Configuration Errors: Incorrect settings or parameters within the certificate management system.
  • Authentication/Authorization Failures: Issues with credentials or permissions required to perform the CLM action.
  • Expired Certificates: Attempting to renew or use an expired certificate.
  • CA Service Problems: Outages or issues with the CA providing the certificates.
  • Policy Violations: Actions that do not comply with the defined security policies or certificate policies.

To configure a CLM action failure alert:

  1. Go to (Menu) > CERT+ > ALERTS & LOGS > Alerts > Certificate Alerts.
    The Certificate Alerts page is displayed.
  2. Click the () Settings icon.
    The Configure Alerts page is displayed.
  3. Enter an Alert name.
  4. From the Event type dropdown list, select CLM action failure alert.
  5. From the Certificate category dropdown list, select the type of certificate.
  6. In the Alert message field, enter the additional information.
  7. Set the Alert severity as required.
  8. To configure email alerts, in the Email configuration section, enter the valid Email address that will receive the email notifications in the event of a connection failure.
  9. Enter the relevant subject in the Subject field.
  10. To use the Simple Network Management Protocol (SNMP) for sending the alerts:
    1. Enter the Destination IP address for the alert.
    2. Select the SNMP Version to be used.
    3. Enter the Port number to be used for the alert.

    4. Enter the Community string for the alert.

      The string is similar to a user ID or password and allows users to access the requested information on the device.

  11. Click the Add button to create the alert.
    The new alert is now listed in the Certificate Alerts page, and below in the same Configure Alerts page.
  12. Click Reset, if you want to re-enter the details.
  13. Click Cancel, if you want to close Configure Alerts page and return to Certificate Alerts page.

Modifying the Configured CLM Action Failure Alerts

To ensure effective monitoring and timely resolution of issues in certificate management, you can modify the configured CLM (Certificate Lifecycle Management) action failure alerts.

To modify a CLM action failure alert:

  1. In the Configure Alerts page > failure alerts list in bottom of page, click the check-box that the configured failure alert to be modified.
  2. Once the check-box is selected, the () Modify icon and () Delete icon appears on the right-top of the page.
  3. Click the () Modify icon.
    The configure alerts page appears with existing information.
  4. Enter the re-select/enter the required details in the fields.
  5. Click Update.
    The pop-up appears as Updated Successfully.
  6. Click Cancel, if you want to close Configure Alerts page and return to Certificate Alerts page.

Deleting the Configured CLM Action Failure Alerts

You can delete the configured CLM action failure alerts from the certificate alerts list.

To delete a CLM action failure alert:

  1. In the Configure Alerts page > failure alerts list in bottom of page, click the check-box that the configured failure alert to be modified.
  2. Once the check-box is selected, the () Modify icon and () Delete icon appears on the rig-top of the page.
  3. Click the () Delete icon.
    The Confirmation window is displayed with message as Do you want to delete certificate alert?
  4. Click Yes.
    The pop-up message appears as Deleted Successfully
  5. Click No, if you want to return to Configure Alerts page.